Book a demo

Your team’s prompts,
checked before they’re sent.

shim reviews what people type into ChatGPT, Claude and Gemini. Credentials, email addresses, card numbers, IBANs and confidential terms are masked or stopped in the browser. Administrators keep the evidence.

Book a demo See how a review works
Application
    Checked on this device

    Review before sending

    Your organization flagged sensitive text.

    1 credential 1 email address
    Detection details
    • credential Here is our config. AWS key AKIAIOSFODNN7EXAMPLE , and ask ali@bank.example befor…
    • email address …y AKIAIOSFODNN7EXAMPLE, and ask ali@bank.example before Friday.

    Matched rule IDs: secrets, email

    ChatGPT text prompt · Checked locally by shim

    Administrators can review the original prompt and any applied edit or mask for 90 days, including cancelled requests. Your choice and, when available, your ChatGPT account email and sent conversation ID are also recorded.

    The original prompt will be sent to ChatGPT.

    500 characters max. Administrators can read this; avoid sensitive data.

    Administrators can review the original prompt and any applied edit or mask for 90 days, including cancelled requests. Your choice, explanation and, when available, your ChatGPT account email and sent conversation ID are also recorded.

    Final text is checked before sending.

    After masking 
    Here is our config. AWS key [REDACTED_1], and ask [REDACTED_2] before Friday.

    Administrators can review the original prompt and any applied edit or mask for 90 days, including cancelled requests. Your choice and, when available, your ChatGPT account email and sent conversation ID are also recorded.

    This stage runs the extension’s detector. Nothing you type here leaves this page.

    Six kinds of text shim notices

    Checked in the browser, before anything is sent.

    Highlight one kind 
    Why did the Project Halcyon refund fail?
Card 4111 1111 1111 1111, customer TCKN 10000000146,
refund to TR33 0006 1005 1978 6457 8413 26.
OPENAI_API_KEY=sk-proj-EXAMPLE0123456789abc
AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
Questions go to ali@bank.example.
    One prompt, seven matches. Clean text around them is never captured.

    Each rule picks one action

    Rule action

    AWS key AKIAIOSFODNN7EXAMPLE

    Sent to ChatGPT AWS key AKIAIOSFODNN7EXAMPLE

    Recorded with the original

    Review before sending

    Edit or mask Send once Cancel

    Masking required

    Edit or mask Cancel

    Blocked by your organization

    Edit or mask Cancel

    Sends as written. The match and the original are recorded.

    The employee edits or masks, sends once, or cancels.

    No Send once. Nothing is masked automatically.

    No override. The matched text comes out before anything is sent.

    What happens when someone presses Send

    A flagged prompt passes four steps. Only clean or approved text moves on.

    1. Detect

      The extension reads the draft in a recognized composer and runs the rules locally. Nothing is uploaded to decide.

    2. Review

      A native dialog offers Edit or mask, Send once and Cancel. Blocking rules offer no override.

    3. Decide

      Masked and edited drafts are rechecked against the current rules before they go. Send once asks for an optional explanation that only administrators can read.

    4. Record

      The matched prompt, the applied version, the choice and the policy at that moment land in the console. Clean prompts are never captured.

    The console shows what was caught and what replaced it

    The shim console’s request inspector on a masked ChatGPT request: the prompt with the AWS access key and the email address struck through and replaced by [REDACTED_1] and [REDACTED_2], Deleted in 90 days, the activity trail, the account and conversation, both rules from the Standard policy, version 4, and the device.
    What the inspector shows:

    Never captured

    • Prompts that match no rule
    • Whole files
    • Text from unrecognized composers

    Where it works today

    Prompts and attached files in managed browsers. Your organization hosts the console.

    Read the coverage limits
    Coverage by application and browser
    ChromeEdge
    ChatGPT Alpha Alpha
    Claude Alpha Alpha
    Gemini Alpha Alpha

    See it run in your own browsers.

    Book a demo